LI
Product
libexpat
65
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 10High 24Medium 22Low 2
Watch
Add libexpat to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-32778 | 5.5 | Mar 16 | libexpat before 2.7.5 allows a NULL pointer dereference in the function setContext on retry after an earlier ouf-of-memory condition Affected: before 2.7.5 |
| CVE-2026-32777 | 5.5 | Mar 16 | libexpat before 2.7.5 allows an infinite loop while parsing DTD content Affected: before 2.7.5 |
| CVE-2026-32776 | 5.5 | Mar 16 | libexpat before 2.7.5 allows a NULL pointer dereference with empty external parameter entity content Affected: before 2.7.5 |
| CVE-2025-66382 | 5.5 | Nov 28 | In libexpat through 2.7.3, a crafted file with an approximate size of 2 MiB can lead to dozens of seconds of processing time Affected: through 2.7.5 |
| CVE-2023-52426 | 5.5 | Feb 4 | libexpat through 2.5.0 allows recursive XML Entity Expansion if XML_DTD is undefined at compile time Affected: through 2.5.0 |
| CVE-2026-56131 | 4.9 | Jun 19 | libexpat before 2.8.2 lacks handler call depth tracking for calls to XML_ResumeParser from within handlers in cases of a policy violation Affected: before 2.8.2 |
| CVE-2026-41080 | 2.9 | Apr 16 | libexpat before 2.8.0 uses insufficient entropy, and thus hash flooding can occur via a crafted XML document Affected: before 2.8.0 |
| CVE-2026-24515 | 2.5 | Jan 23 | In libexpat before 2.7.4, XML_ExternalEntityParserCreate does not copy unknown encoding handler user data Affected: before 2.7.4 |
| CVE-2015-1283 | – | Jul 23 | Multiple integer overflows in the XML_GetBuffer function in Expat through 2.1.0, as used in Google Chrome before 44.0.2403.89 and other products, allow remote attackers to cause a… Affected: through 2.1.0 |
| CVE-2013-0340 | – | Jan 21 | expat before version 2.4.0 does not properly handle entities expansion unless an application developer uses the XML_SetEntityDeclHandler function, which allows remote attackers to… Affected: before 2.4.0 |
| CVE-2012-1148 | – | Jul 3 | Memory leak in the poolGrow function in expat/lib/xmlparse.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (memory consumption) via a large… Affected: through 2.0.1; 1.95.1; 1.95.2; 1.95.4; 1.95.5; 1.95.6; +3 more |
| CVE-2012-1147 | – | Jul 3 | readfilemap.c in expat before 2.1.0 allows context-dependent attackers to cause a denial of service (file descriptor consumption) via a large number of crafted XML files Affected: through 2.0.1; 1.95.1; 1.95.2; 1.95.4; 1.95.5; 1.95.6; +3 more |
| CVE-2012-0876 | – | Jul 3 | The XML parser (xmlparse.c) in expat before 2.1.0 computes hash values without restricting the ability to trigger hash collisions predictably, which allows context-dependent… Affected: before 2.1.0 |
| CVE-2009-3560 | – | Dec 4 | The big2_toUtf8 function in lib/xmltok.c in libexpat in Expat 2.0.1, as used in the XML-Twig module for Perl, allows context-dependent attackers to cause a denial of service… Affected: 2.0.1 |
| CVE-2009-3720 | – | Nov 3 | The updatePosition function in lib/xmltok_impl.c in libexpat in Expat 2.0.1, as used in Python, PyXML, w3c-libwww, and other software, allows context-dependent attackers to cause… Affected: 2.0.1 |